Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
File: YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft (raw, json)
Hash identifier: MQet5/8lcrC57HA4gaVSAd+lqbZ6qeABOm3j2xMd1pU=
Subject key identifier: 40:34:75:92:C3:E7:01:7F:20:6F:73:01:71:DC:98:4B:18:7C:50:E3
Authority key identifier: 60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
Certificate issuer: /CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Certificate serial: 0194BBCE9557C854549C38B4688ACE0B0E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
Manifest number: 084F
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: SiWRZkKpgde5atWHqH4e8qB6Tgc.roa (hash: iSQoSjNloOyOq1kG8c4T/IKGd9ldR/sWYpzULfuNsNw=)
2: YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl (hash: oAs/444/orQj6UyZCAoo9xMGFKL22mIgNokgTJbi7no=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:95:57:c8:54:54:9c:38:b4:68:8a:ce:0b:0e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=40347592c3e7017f206f730171dc984b187c50e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:47:e9:16:34:8d:f9:43:c3:55:e4:5a:02:dd:
4c:ff:99:da:93:71:89:2b:ab:4f:c5:07:19:a5:ce:
c5:7d:89:f9:ab:7d:f4:0a:fd:ae:13:ee:ff:84:da:
eb:38:c2:15:62:2b:64:1b:db:23:4c:17:87:e9:7a:
63:63:fb:d8:f1:57:3d:47:b0:4e:48:e3:5f:62:0e:
0d:91:f6:4f:02:d1:56:c7:50:5a:f6:c5:66:bd:85:
8c:e6:d0:b9:d6:e4:3b:4f:77:b6:1a:16:cb:74:50:
74:bc:ba:04:1e:fd:e0:d6:de:15:d5:bd:09:be:37:
c0:da:84:c8:02:c5:63:5e:d3:df:0b:fa:48:55:38:
e5:09:30:5e:fe:72:2c:96:9c:6d:48:a7:da:ff:34:
85:6e:51:92:8c:12:ed:6a:b9:d7:c8:5b:e8:06:b3:
f4:b1:98:d3:f5:a7:82:be:3a:4a:c4:93:96:1c:9d:
4f:ea:01:cb:16:53:e2:9d:8e:54:17:49:75:0f:e9:
2d:6d:7c:5f:6a:19:2c:b1:10:31:fd:06:c0:ed:11:
50:5b:60:68:01:e6:cb:62:94:46:77:38:24:1c:ee:
46:fe:f0:06:0b:b1:b4:7b:8d:5a:73:4e:e2:bf:bd:
a9:fc:19:ca:e7:7e:38:b3:4d:a9:5c:4e:e2:19:db:
a3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:34:75:92:C3:E7:01:7F:20:6F:73:01:71:DC:98:4B:18:7C:50:E3
X509v3 Authority Key Identifier:
keyid:60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:4a:60:23:3a:85:9a:a2:4b:2a:d9:ff:b8:86:76:b5:98:29:
e8:5a:40:3f:0d:75:e9:d4:9f:b4:b5:43:6e:a4:6b:1c:a0:5b:
de:83:6d:4e:b7:84:dc:69:ea:dd:57:72:6e:4d:94:60:b4:01:
da:a2:99:13:31:8b:36:74:8d:14:d7:92:2f:15:91:fd:04:94:
05:7a:ee:9c:8e:85:4e:47:5a:a6:60:54:4e:17:99:1b:82:20:
b1:5c:33:d4:31:03:4c:ca:b9:a2:33:78:56:00:64:32:eb:55:
47:19:c2:96:d2:09:42:0e:70:0e:49:74:22:56:ac:a8:9c:4d:
b3:3d:fb:ac:e5:9e:5c:40:98:04:7b:e7:c0:6f:d2:74:5d:db:
42:12:2b:19:4a:9b:85:7a:75:14:8e:35:6b:e3:0b:99:94:fd:
92:3a:eb:bb:6d:6b:4b:a4:ca:90:b0:6c:ff:12:54:cc:1e:77:
1a:8d:b8:24:84:92:b8:6c:29:fb:eb:73:0c:e3:08:6a:0c:5e:
7d:a8:9f:e4:2e:e9:fd:be:81:ec:b6:e5:7f:c5:a2:50:e7:ea:
38:cd:62:bd:4a:e8:de:af:22:3c:b8:2d:b9:bb:c1:11:a6:26:
f3:77:45:35:ac:d3:4c:85:d2:b2:1e:0f:0e:cc:9e:86:43:79:
c3:b7:94:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:08:21 2025 by rpki-client